Skip to content

Chanhassen Dinner Theatres in Minnesota reschedules shows after network attack

The venue said it took systems offline after detecting an attack on part of its network, with some performances and services to be rescheduled.

Chanhassen Dinner Theatres sign lit up at night above the venue entrance.
The Chanhassen Dinner Theatres sign is seen in Chanhassen, Minnesota. The venue said it took computer systems offline after detecting an attack on part of its network. (Brent R./Google Maps)

Chanhassen Dinner Theatres said Saturday that some performances and services will be rescheduled after the Minnesota venue took computer systems offline following what it described as an attack detected the previous day on part of its network.

The disruption affects ticket holders and box office operations at one of Minnesota’s best-known live entertainment venues. Chanhassen Dinner Theatres says it has served 13 million guests since 1968 and employs more than 300 people in Chanhassen, southwest of Minneapolis.

The venue said in a Facebook post that it took systems offline “out of an abundance of caution.” Bring Me The News first reported the post Sunday.

Screenshot of a Chanhassen Dinner Theatres Facebook post saying some performances and services will be rescheduled after an attack on part of its network.
A Chanhassen Dinner Theatres Facebook post said some upcoming performances and services would be rescheduled after the venue detected an attack on part of its network and took systems offline. (Chanhassen Dinner Theatres/Facebook)

The venue described the issue as a technical problem affecting its computer systems. It said some upcoming performances and services will be rescheduled while its team and outside experts work to bring systems back online.

Ticket holders whose performances are affected will be contacted directly by phone and email with next steps and rescheduling information, the venue said. Its website continued to list upcoming acts Sunday.

The attack notice followed an earlier Friday update that said “Guys and Dolls” performances on Friday, Saturday and Sunday were canceled because of cast illness. The Friday update also said the box office was experiencing technical difficulties with phone and internet lines, which could delay response times. The venue has not said whether those phone and internet problems were connected to the attack disclosed Saturday.

Chanhassen Dinner Theatres did not immediately respond to a DysruptionHub request for comment Sunday seeking more information about the systems affected, whether ticketing or payment services were disrupted, the expected restoration timeline and whether any customer or employee data was accessed.

Chip in once
If this reporting helped you, a one-time tip helps cover hosting, tools and future investigations.

Tip us

Support us monthly
A small monthly pledge keeps independent coverage and our reader tools online for everyone.

Become a Supporter

Chanhassen Dinner Theatres has not publicly confirmed ransomware, data theft, a ransom demand or a threat actor. Officials have not said which systems were affected, whether ticketing or payment systems were directly disrupted, or when all systems are expected to return.

The venue operates a 90,000-square-foot complex with multiple stages and is described by the Minnesota Historical Society’s MNopedia as the largest professional dinner theater company in the United States and a major Carver County tourist attraction.

A similar disruption hit Living Room Theaters in November, when the company said a cyberattack made most of its computer systems unusable and shut down its Portland, Oregon, and Indianapolis cinemas, leaving it unable to operate, sell tickets or process refunds. The company said both locations reopened Nov. 21 after it worked with the FBI and cybersecurity experts to rebuild, restore and relaunch its website and ticketing systems.

The venue said affected ticket holders will be contacted directly and broader updates will follow. It has not said when all systems will be restored or whether any customer or employee data was accessed.

Attribution note: DysruptionHub credits upstream reporting and primary sources—see citations above. If this report informed your coverage, please cite DysruptionHub with a link.
DysruptionHub Staff

DysruptionHub Staff

A collaborative project to bring you the latest cyberattacks impacting the availability of services and goods in the United States.

All articles

More in Private Sector

See all

More from DysruptionHub Staff

See all